Commit Graph

12734 Commits

Author SHA1 Message Date
Ben Hutchings e01624c730 cpupower: Move library to multiarch directory
Upstream moved it from /usr/lib to /usr/lib64 in 4.15, but neither of
these is correct.
2017-12-27 01:38:00 +00:00
Ben Hutchings 7bcd3c4d13 lockdown: Update calls to kernel_is_locked_down() in "mtd: Disable slram and phram when locked down"
We need to pass a string to be logged the first time the check fires.
2017-12-27 01:37:24 +00:00
Ben Hutchings 7dd9b58675 Update to 4.15-rc5
Also update the aufs and lockdown patchsets.
2017-12-26 18:54:17 +00:00
Ben Hutchings ab5d03cb3b Prepare to release linux (4.14.7-1). 2017-12-22 14:12:23 +00:00
Ben Hutchings 8423f81c55 Merge remote-tracking branch 'alioth/sid' into sid 2017-12-22 14:10:04 +00:00
Salvatore Bonaccorso 196596c560 crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) 2017-12-22 09:13:19 +01:00
Salvatore Bonaccorso 4f056ca2c6 crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) 2017-12-22 09:00:33 +01:00
Ben Hutchings adef82ee3a Bump ABI to 2 2017-12-22 03:54:44 +00:00
Ben Hutchings cf1f6e2019 bpf/verifier: Fix multiple security issues (Closes: #883558) 2017-12-22 03:54:44 +00:00
Salvatore Bonaccorso a983b69920 Add one more known CVE id
Gbp-Dch: Ignore
2017-12-21 06:07:46 +01:00
Salvatore Bonaccorso 2bc058f58c Add opening parenthesis
Gbp-Dch: Ignore
2017-12-20 20:41:06 +01:00
Ben Hutchings fc7f6fafd8 Add security fixes 2017-12-20 19:27:18 +00:00
Ben Hutchings 285e1090f2 [rt] Update to 4.14.6-rt7 2017-12-20 18:53:59 +00:00
Ben Hutchings 9e0441b20a Update to 4.14.7
Drop patches applied upstream, and fix a few conflicts.
2017-12-20 18:40:37 +00:00
Vagrant Cascadian a865f2fdb7 [armhf, arm64] Backport patches from 4.15.x to support dwmac-sun8i. 2017-12-11 13:15:45 -08:00
Salvatore Bonaccorso 2f634be5d8 xen/time: do not decrease steal time after live migration on xen
Closes: #871608
2017-12-03 10:53:37 +01:00
Salvatore Bonaccorso 7e09c9fcc8 Add ABI reference for 4.14.0-1 2017-12-03 10:18:48 +01:00
Ben Hutchings 5b750f6268 Prepare to release linux (4.14.2-1). 2017-11-30 12:33:47 +00:00
Ben Hutchings 1bf82631fb Revert "SCSI: Enable SCSI_MQ_DEFAULT"
This reverts commit 16d7f29d46.  There
seem to be a lot of important fixes going into 4.15 for blk-mq, most
of which aren't tagged for stable, making it look a bit risky as a
default for 4.14.  I'll probably re-enable this for 4.15-rc.
2017-11-30 12:07:11 +00:00
Ben Hutchings 3f937de450 [x86] mmap: Add an exception to the stack gap for Hotspot JVM compatibility
Closes: #865303
2017-11-30 12:07:11 +00:00
Ben Hutchings a87b11684d Prepare to upload to unstable
Drop the ~exp1 from the version.

Set ABI to 1.
2017-11-30 12:06:47 +00:00
Salvatore Bonaccorso 71832be11b mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (CVE-2017-1000405) 2017-11-30 08:16:06 +01:00
Ben Hutchings fb72f17cab [rt] Update to 4.14.1-rt3 2017-11-29 23:05:39 +00:00
Ben Hutchings b0a4fbf1cd [rt] Add new signing subkey for Steven Rostedt 2017-11-29 22:11:04 +00:00
Ben Hutchings 16d7f29d46 SCSI: Enable SCSI_MQ_DEFAULT
Now that blk-mq has a similar default scheduler as the old block
layer, it should be safe to switch over.

Note how to revert this at run-time if necessary.
2017-11-29 22:11:04 +00:00
Salvatore Bonaccorso f6077f8f4f Add entry for CVE-2017-16994 2017-11-27 21:35:01 +01:00
Salvatore Bonaccorso f83f2a2082 Update to 4.14.2 2017-11-25 08:30:31 +01:00
Ben Hutchings 2ed7a163b9 leds: Enable LEDS_BRIGHTNESS_HW_CHANGED (Closes: #872862) 2017-11-24 17:20:44 +00:00
Ben Hutchings a633085eb6 apparmor: fix oops in audit_signal_cb hook (regression in 4.14) 2017-11-24 13:25:03 +00:00
Ben Hutchings d898523197 [rt] Clean up configuration using kconfigeditor2 2017-11-23 01:03:29 +00:00
Ben Hutchings b979dd72a4 [armel] Change configuration to reduce image size (fixes FTBFS)
- Change CONNECTOR from built-in to module, and disable PROC_EVENTS
- Disable INTEGRITY and dependent options
- video: Disable USB_APPLEDISPLAY, BACKLIGHT_CLASS_DEVICE

This still only gets us down to 99.26% of maximum size, so further
changes will be needed soon.
2017-11-23 01:00:43 +00:00
Ben Hutchings d769bf7e2b Update to 4.14.1 2017-11-22 03:13:35 +00:00
Ben Hutchings 5436f201dd aufs: Update support patchset to aufs4.14-20171120 2017-11-21 16:20:07 +00:00
Ben Hutchings bf3c5027e0 i40e: Build for 32-bit targets again
Apply the upstream patches that removed the use of cmpxchg64().
2017-11-21 16:14:37 +00:00
Ben Hutchings 1dffc3c5d6 [rt] Update to 4.14-rt1 and reenable (Closes: #882192) 2017-11-20 14:17:41 +00:00
Ben Hutchings 94964d2c86 Prepare to release linux (4.14-1~exp1). 2017-11-17 00:16:15 +00:00
Ben Hutchings 0876bb2edc Set ABI name to trunk 2017-11-17 00:16:12 +00:00
Ben Hutchings 1a1f0ef065 Release linux (4.13.13-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAloODhAACgkQ57/I7JWG
 EQkFAg//Zb5RqwypcEFRZs6Oyi4jF6EekQW+UVXjAE8gAw3ae8+1uvkg3TyMY7uT
 C//3H1DGY/A3imqHsxku9NG5T9KhJL9cKn2EDRz8c/+lU949wXjzSFCQk+p9mwcb
 RSyuqES+FwtrMJoN0iXpVIiTSjImuu4IIpTmc6IsZo1frn5oHKmeC4mvsKuflL/S
 usdauRUkQewtTvi/Z8wDA5fJIDN2ff0DcSN8Km/QPlB2zUoGaQRM36ApZVeHDX3X
 190bDAuBfJp9Pht3eFPUq6HwEht9hbiqSaSpMKB/jyPE8lWZ7AL8CM2qiOuZCXil
 ncELxkx+8Cqp4jAWc3wqGZ5mkeVHeHxZcmFv0b4hQaaifW5GtmlMo/XHhMeFIoCc
 tbcC55No2c3ZUhUH0kAQyf26zZ3f7hBAYT8EI5BNngPpZB4W7NJL8A2c09QYxAVB
 /uXNnCdd7LZ9Dnhgc0K1FjIEckd1XHVQgVZ6Seo4Pv2adMfLckla3Xvqj888515a
 akTL9LFAKySOqalakMl34G2FT1S0CR9+7I45KFcKjiGW5pF1RgDeLZy1W+nQq3Vd
 oH2KmWGovmouMEnrh8RgKJNwLkelVkLKl0AFhJ29PGeDrGAklz0Sy5egB8iqoxRh
 fiKph8IGdD8akqlI4d8mTWs01FmALkkSHUkLAxbME8HC3lpb7Ic=
 =TJmK
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.13.13-1'

Release linux (4.13.13-1).
2017-11-16 22:18:14 +00:00
Ben Hutchings 8c84dc3d14 Prepare to release linux (4.13.13-1). 2017-11-16 21:04:10 +00:00
Ben Hutchings 617046eb45 netfilter: nat: Avoid ABI change in 4.13.13 2017-11-16 21:04:07 +00:00
Ben Hutchings 7cb3e39661 ALSA: timer: Avoid ABI change in 4.13.13 2017-11-16 20:52:13 +00:00
Ben Hutchings 4c3b3b1dec dvb_frontend: don't use-after-free the frontend struct (CVE-2017-16648)
Plus another fix it seems to depend on.
2017-11-16 20:04:01 +00:00
Ben Hutchings f03dc09259 [armhf] drm: Enable DRM_SUN4I etc. (Closes: #881570) 2017-11-16 19:59:53 +00:00
Ben Hutchings 91fc8b5e9a Clean up kconfig 2017-11-16 19:59:49 +00:00
Riku Voipio 79e266334e [arm64] config fixup
drop CRYPTO_DEV_CAVIUM_ZIP due to crashes
add SERIAL_DEV_BUS, needed for HiKey bluetooth
2017-11-16 21:54:44 +02:00
Ben Hutchings 8aabb7ea89 amdgpu: Enable DRM_AMDGPU_SI, CONFIG_DRM_AMDGPU_CIK (Closes: #847570) 2017-11-16 19:17:33 +00:00
Ben Hutchings 26fe100dfe [x86] rmi4: Disable RMI4_SMB (Closes: #880471) 2017-11-16 19:12:16 +00:00
Ben Hutchings 3529916815 [arm64] nvmem: Enable NVMEM_SUNXI_SID as module (Closes: #881567) 2017-11-16 19:10:31 +00:00
Ben Hutchings a4d1de0350 [arm64,x86] net/wireless: Enable RTL8723BS as module (Closes: #881568) 2017-11-16 19:07:46 +00:00
Ben Hutchings e81177b8a9 amdgpu: Enable DRM_AMDGPU_USERPTR on all architectures
I missed this when enabling amdgpu on arm64.

Also move the explicit disabling of DRM_AMDGPU_CIK to the top level
config.
2017-11-16 18:44:33 +00:00